IP QoS policy match commands

dscp

Syntax

dscp dscp-value | dscp-name [dscp-mask]

no dscp

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a DiffServ Code Point (DSCP) used for classification of packets from the specified FC.

The no form of this command removes the DSCP match criterion.

Note:

  • This feature is applicable for ip-criteria (any and dscp-only) and ipv6-criteria (any and dscp-only).

  • The user is not be allowed to configure dscp name and dscp mask combinations.

  • When the user configures dscp value alone, the ‟show” command displays dscp value as configured value and dscp mask as ‟FC”.

  • Use of dscp-value and dscp-mask allows for efficient use of match resources in hardware, because the specification of mask allows user to combine individual DSCP entries to a single value/mask pair and specify similar action for all of them.

Parameters

dscp-value

Specifies the DSCP value in hexadecimal, decimal, or binary format.

Values

0 to 64

dscp-name

Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DSCP can only be specified by its name.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, cp35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

dscp-mask

Specifies a 6-bit mask that can be configured using the formats described in the following table.

This parameter is only supported on the 7210 SAS-D and 7210 SAS-Dxp.

Table: DSCP mask value format

Format style

Format syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

To select a range from 4 up to 7 specify 4 and 0b000100 for value and mask.

Values

0 to 64 (decimal, hexadecimal, or binary)

Default

64 (exact match)

dst-ip

Syntax

dst-ip {ip-address/mask}

dst-ip {ipv6-address/mask}

no dst-ip

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a destination address range to use as a SAP QoS policy match criterion.

To match on the destination address, specify the address and its associated mask; for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used.

The no form of this command removes the destination IP address match criterion.

Parameters

ip-address

Specifies the IP address of the destination IP interface. This address must be unique within the subnet and specified in dotted-decimal notation.

Values

ipv4-prefix -

a.b.c.d

ipv6-address

Specifies the IP address of the destination IPv6 interface. This address must be unique within the subnet.

Values

ipv6-prefix -

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - 0 to FFFF (hexadecimal)

d - 0 to 255 (decimal)

mask

Specifies the length in bits of the subnet mask.

Values

1 to 32 (IPv4)

1 to 128 (IPv6; 7210 SAS-D)

1 to 64 (IPv6; 7210 SAS-Dxp)

dst-port

Syntax

dst-port {eq} dst-port-number

no dst-port

Context

config>qos>sap-ingress

config>qos>sap-ingress>ip-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a destination TCP or UDP port number for a SAP QoS policy match criterion.

The no form of this command removes the destination port match criterion.

Parameters

eq dst-port-number

Specifies the destination TCP or UDP port number, specified as equal to (eq) the destination port value specified as a decimal integer.

Values

1 to 65535

ip-prec

Syntax

ip-prec ip-prec-value [ip-prec-mask]

no ip-prec

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies an IP precedence value that must be matched to perform the associated classification actions. If an ingress packet on the SAP where the SAP ingress QoS policy is applied to matches the specified IP precedence value, the actions associated with this entry are taken.

The ip-prec-value is derived from the most significant three bits in the IP header ToS byte field (precedence bits). The three precedence bits define eight Class-of-Service (CoS) values commonly used to map packets to per-hop Quality-of-Service (QoS) behavior. The precedence bits are also part of the newer DSCP method of mapping packets to QoS behavior. The DSCP uses the most significant six bits in the IP header ToS byte and so overlaps with the precedence bits.

Both IP precedence and DSCP classification rules are supported. A match entry cannot match on both IP DSCP and IP precedence, which means that the user can use either IP DSCP or IP precedence match in a match entry but not both. The software blocks configuration of ip-precedence match if the ip-dscp command is configured already. The converse is also true. A single policy having multiple match entries can have entries such that some of them match IP DSCP and others match IP precedence. The order of the entry determines the priority of the match.

The no form of this command removes the IP precedence match criterion.

Parameters

ip-prec-value

Specifies the unique IP header ToS byte precedence bits value that matches the IP precedence rule.

Values

0 to 7

ip-prec-mask

Specifies a mask that can be configured using the formats described in the following table.

Table: IP precedence mask value format

Format style

Format syntax

Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

To select a range from 4 up to 7, specify an ip-prec-value of 4 and an ip-prec-mask of 0b100 for value and mask.

src-ip

Syntax

src-ip ipv4-address/mask

no src-ip

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-egress>ip-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a source IPv4 address range to use as a SAP QoS policy match criterion.

To match on the source IPv4 address, specify the address and its associated mask; for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used.

The no form of this command removes the source IPv4 address match criterion.

Parameters

ipv4-address

Specifies the IPv4 address of the source IP interface. This address must be unique within the subnet and specified in dotted-decimal notation.

Values

a.b.c.d

mask

Specifies the subnet mask length, expressed as an integer or in dotted-decimal notation.

Values

1 to 32

src-ip

Syntax

src-ip ipv6-address/mask

no src-ip

Context

config>qos>sap-ingress>ipv6-criteria>entry>match

config>qos>sap-egress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a source IPv6 address range to use as a SAP QoS policy match criterion.

The no form of this command removes the source IPv6 address match criterion.

Parameters

ipv6-address

Specifies the IPv6 address of the source IP interface. This address must be unique within the subnet.

Values

ipv6-address

x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x - 0 to FFFF (hexadecimal)

d - 0 to 255 (decimal)

mask

Specifies the subnet mask length, expressed as an integer.

Values

1 to 128 (7210 SAS-D)

1 to 64 (7210 SAS-Dxp)

src-port

Syntax

src-port {eq} src-port-number

no src-port

Context

config>qos>sap-ingress>ip-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a source TCP or UDP port number for a SAP QoS policy match criterion.

The no form of this command removes the source port match criterion.

Parameters

eq src-port-number

Specifies the source TCP or UDP port number, as a decimal integer, against which to match equal (eq) values.

Values

1 to 65535